Update auth.rst with clearer language

[JimCollinsDC]

I read "This process is secure on web browsers because they enforce a policy that prevents your login credentials from being sent to any domain other than the one you are currently interacting with." three times going "wtf does that even mean." This language is clearer and more straightforward.